Skip to content

Pull requests: sublime-security/sublime-rules

New pull request New
110 Open 3,669 Closed
110 Open 3,669 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Update link_display_text_excessive_right_to_left_marks.yml
#3780 opened Jan 14, 2026 by D-Bolton Loading…
Create suspicious_sender_display_name_phone_reference.yml in-test-rules PR is in our testing suite to collect telemetry
#3779 opened Jan 14, 2026 by D-Bolton Loading…
Create brand_impersonation_xodo.yml in-test-rules PR is in our testing suite to collect telemetry
#3778 opened Jan 14, 2026 by markmsublime Loading…
Update Fake VM Feed Rule review-needed Indicates that a PR is waiting for review test-rules:excluded:author_membership
#3777 opened Jan 14, 2026 by vector-sec Loading…
1
Enhance spam detection rule for dating profiles in-test-rules PR is in our testing suite to collect telemetry
#3776 opened Jan 14, 2026 by peterdj45 Loading…
Add detection rule for BEC fake thread impersonation in-test-rules PR is in our testing suite to collect telemetry
#3775 opened Jan 14, 2026 by peterdj45 Loading…
Create service_abuse_intuit_noreply.yml in-test-rules PR is in our testing suite to collect telemetry
#3774 opened Jan 13, 2026 by markmsublime Loading…
Create link_self_sender_doc_review.yml in-test-rules PR is in our testing suite to collect telemetry
#3773 opened Jan 13, 2026 by D-Bolton Loading…
Update bec_romance_scam.yml in-test-rules PR is in our testing suite to collect telemetry
#3772 opened Jan 13, 2026 by JFarina5 Loading…
Create attachment_w9_invoice_chromium.yml in-test-rules PR is in our testing suite to collect telemetry
#3771 opened Jan 13, 2026 by MSAdministrator Loading…
@MSAdministrator
Update attachment_pdf_skia_headless.yml in-test-rules PR is in our testing suite to collect telemetry
#3770 opened Jan 13, 2026 by MSAdministrator Loading…
@MSAdministrator
Create attachment_fake_thread_invoice_pdf.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#3769 opened Jan 13, 2026 by MSAdministrator Loading…
@MSAdministrator
Create service_abuse_getaccept.yml in-test-rules PR is in our testing suite to collect telemetry
#3768 opened Jan 13, 2026 by markmsublime Loading…
Update impersonation_usps.yml in-test-rules PR is in our testing suite to collect telemetry
#3767 opened Jan 13, 2026 by markmsublime Loading…
Create service_abuse_breely_payment_redirect.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#3766 opened Jan 13, 2026 by MSAdministrator Loading…
@MSAdministrator
Update impersonation_ms_teams_invite.yml in-test-rules PR is in our testing suite to collect telemetry
#3765 opened Jan 13, 2026 by zoomequipd Loading…
Add 'Fax message' condition to detection rule in-test-rules PR is in our testing suite to collect telemetry
#3764 opened Jan 13, 2026 by peterdj45 Loading…
New rule (Brand impersonation) File sharing with suspicious artifacts in html body in-test-rules PR is in our testing suite to collect telemetry
#3763 opened Jan 12, 2026 by IndiaAce Loading…
Create service_abuse_adobe_document_approval.yml in-test-rules PR is in our testing suite to collect telemetry
#3761 opened Jan 12, 2026 by MSAdministrator Loading…
@MSAdministrator
Update suspicious_request_for_quote_or_purchase.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#3758 opened Jan 12, 2026 by D-Bolton Loading…
Create attachment_pdf_subject_pattern.yml in-test-rules PR is in our testing suite to collect telemetry
#3757 opened Jan 12, 2026 by keaton-sublime • Draft
Create attachment_ics_meeting_invite.yml in-test-rules PR is in our testing suite to collect telemetry review-needed Indicates that a PR is waiting for review
#3756 opened Jan 12, 2026 by MSAdministrator Loading…
@MSAdministrator
Update phaas_impact_solutions.yml in-test-rules PR is in our testing suite to collect telemetry
#3755 opened Jan 9, 2026 by MSAdministrator Loading…
@MSAdministrator
Updating "Fake fax" rule to remove the gate on reply/fwd messages in-test-rules PR is in our testing suite to collect telemetry
#3754 opened Jan 9, 2026 by IndiaAce Loading…
New rule (Attachment): Attached PDF is password protected matching patterns related to malicious files.
#3753 opened Jan 9, 2026 by keaton-sublime • Draft
ProTip! What’s not been updated in a month: updated:<2025-12-14.